[MEDIUM] Cross-site scripting from dynamic options in the multiselect field

PKSA-1bcx-mr8v-2v3m CVE-2022-36037 GHSA-3f89-869f-5w76

Affected package: getkirby/cms

Affected version: <3.5.8.1

Reported by:
GitHub